CVE-2026-41293

creationtimestamp| type| source ---|---|--- 2026-05-12 17:15:01+00:00| seen| https://bsky.app/profile/infosec.skyfleet.blue/post/3mloc2ajsvu2j 2026-07-09 22:50:04+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mqapsxsqnv25...

CVE-2026-39534

creationtimestamp| type| source ---|---|--- 2026-05-12 16:35:45+00:00| seen| https://bsky.app/profile/undercode.bsky.social/post/3mlo7u7vfno26...

CVE-2026-8390

creationtimestamp| type| source ---|---|--- 2026-05-12 15:50:25+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mlo5cthkad2p 2026-05-13 06:28:15+00:00| seen| https://www.acn.gov.it/portale/w/aggiornamenti-di-sicurezza-per-mozilla-firefox 2026-05-13 06:44:38+00:00| seen|...

CVE-2026-30905

creationtimestamp| type| source ---|---|--- 2026-05-12 15:28:54+00:00| seen| https://bsky.app/profile/ripjyr.bsky.social/post/3mlo44fuhc423...

WordPress Blog2Social: Social Media Auto Post & Scheduler plugin <= 8.9.0 - Missing Authorization to Authenticated (Subscriber+) Delete Arbitrary B2S Post Records vulnerability

Missing Authorization to Authenticated Subscriber+ Delete Arbitrary B2S Post Records vulnerability discovered by awhacken in WordPress Plugin Blog2Social versions = 8.9.0...

CVE-2026-43937

YetAnotherForum.NET YAF.NET is a C ASP.NET forum. Prior to 4.0.5, Any admin OnPost… handler executes its side effects before the ResultFilterAttribute rewrites the response to a 302 to /Info/4. The most impactful abuse is /Admin/RunSql, whose OnPostRunQuery binds Editor from the POST body and...

GHSA-V25V-M36W-JP4H Dalfox Server Mode Vulnerable to Unauthenticated Remote Code Execution via `found-action`

GHSA: Unauthenticated Remote Code Execution via found-action in Dalfox Server Mode Summary When dalfox is started in REST API server mode dalfox server, the server binds to 0.0.0.0:6664 by default and requires no API key unless the operator explicitly passes --api-key. Because model.Options —...

CVE-2026-38566

HireFlow v1.2 does not implement CSRF token validation on any state-changing POST endpoint. All forms password change at /profile, candidate deletion at /candidates/delete/, feedback submission at /feedback/add/, interview scheduling at /interviews/add are vulnerable to CSRF. An attacker who can...

CVE-2026-45285

creationtimestamp| type| source ---|---|--- 2026-05-12 14:15:50+00:00| seen| https://bsky.app/profile/o2cloud.bsky.social/post/3mlnxz7ebj62a...

CVE-2026-45153

creationtimestamp| type| source ---|---|--- 2026-05-12 14:15:29+00:00| seen| https://bsky.app/profile/o2cloud.bsky.social/post/3mlnxz7ebj62a...

CVE-2026-43321

creationtimestamp| type| source ---|---|--- 2026-05-12 14:15:11+00:00| seen| https://bsky.app/profile/o2cloud.bsky.social/post/3mlnxyuivww2u...

CVE-2025-40949

creationtimestamp| type| source ---|---|--- 2026-05-12 12:19:12+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mlnrjhsgsn2g 2026-05-14 10:00:00+00:00| seen| https://www.cisa.gov/news-events/ics-advisories/icsa-26-134-12 2026-07-17 13:07:38+00:00| seen|...

CVE-2026-41125

creationtimestamp| type| source ---|---|--- 2026-05-12 12:13:35+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mlnr6ey4dn2c 2026-06-09 05:00:00+00:00| seen| https://www.cisa.gov/news-events/ics-advisories/icsa-26-160-02...

CVE-2026-33862

creationtimestamp| type| source ---|---|--- 2026-05-12 12:06:58+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mlnqtmx2vw2h 2026-05-14 10:00:00+00:00| seen| https://www.cisa.gov/news-events/ics-advisories/icsa-26-134-04...

CVE-2026-2465

creationtimestamp| type| source ---|---|--- 2026-05-12 11:59:09+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mlnqfne7qw2t 2026-05-12 12:07:42+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mlnquvpw5o2z 2026-05-12 14:12:40+00:00| seen|...

CVE-2026-45211

creationtimestamp| type| source ---|---|--- 2026-05-12 11:58:50+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mlnqf2q7ij2w 2026-05-12 11:59:25+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mlnqg3vdmc2g...

CVE-2026-42741

creationtimestamp| type| source ---|---|--- 2026-05-12 11:55:35+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mlnq7agdwj2l...

CVE-2026-6813

creationtimestamp| type| source ---|---|--- 2026-05-12 11:42:39+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mlnpi57c3y2t 2026-05-13 00:33:06+00:00| seen| https://bsky.app/profile/atomicedge.bsky.social/post/3mlp2jsnit52s...

CVE-2026-25786

creationtimestamp| type| source ---|---|--- 2026-05-12 11:32:33+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mlnow35agf2v 2026-05-13 13:51:56+00:00| seen| https://mastodon.social/ap/users/115426718704364579/statuses/116567593091474755 2026-05-14 10:00:00+00:00| seen|...

CVE-2026-33893

creationtimestamp| type| source ---|---|--- 2026-05-12 11:01:25+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mlnn6f3zup2l 2026-05-12 12:01:58+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mlnqkoalkl2i 2026-05-14 10:00:00+00:00| seen|...